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REPAIRING APPLICATIONS 



BACKGROUND 



This invention relates to repairing applications. 

An application is a software-based configuration program, 
for example, that runs on a system having processing 
capabilities such as a mobile or stationary computer. An 
application may cease to function properly if one of its 
files, libraries, or other pre-compiled components fails. A 
component can fail if it is deleted from the system running 
the application or otherwise becomes disabled, e.g., becomes 
infected with a virus or changes storage locations and 
therefore becomes inaccessible. 

A user of the application may detect a failed component 
and manually alert the system of the failure. Alternatively, 
a software-based shortcut application or a software-based 
shortcut proxy application can identify a failed component by 
verifying the integrity of the application when the 
application is launched on the system. Before the application 
is launched (and becomes available for use by or on the 
system) , the shortcut application or the proxy application 
checks the application' s files and registry settings for any 
failures. If no failures are detected, the application 
launches. If a failure is detected, the shortcut application 
or the proxy application tries to repair the failed component 
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or triggers a repairing application to try and repair the 
failed component. 

DESCRIPTION OF DRAWINGS 
FIG. 1 is a block diagram of a network architecture. 
5 FIG. 2 is a flowchart of an application healing process. 

FIG. 3 shows an application healing configuration screen. 
FIGS. 4A-B are flowcharts showing an application healing 
process . 

FIG. 5 shows a clear events screen. 
10 DESCRIPTION 

W 

□ Referring to FIG. 1, a network configuration 100 includes 

rJ ^ healing program 102 that monitors an application 104 running 

on a user terminal 106. If the healing program 102 detects a 

nJ 

^ failure in a system call made by the application 104, the 

y 15 healing program 102 initiates repair of the failed application 
104. For simplicity, only one application is shown at the 
user terminal 106 although the user terminal 106 can include 
multiple applications, each of which the healing program 102 
can simultaneously monitor. 
20 The application 104 includes a collection of functions 

and/or data stored in binary format (or a combination of 
binary format and text format) and configuration information 
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associated with the collection of functions and/or data. 
Examples of the application 104 include: 

a) a file that the user terminal 106 directly 
executes such as an executable (EXE) file, a 

5 command (COM) file, a drive (DRV) file, a phone 

(FON) file, and other similar files, 

b) a collection of files that the user terminal 106 
directly executes such as a dynamic link library 
(DLL) and other similar collections of files, and 

QlO c) a routine or application program interface (API) 

M such as Adobe Acrobat™, PaintShop Pro™, and 

m 

W other similar routines and APIs. 

I— J 

The application 104 invokes system calls such as CreateProcess 
(loading and initiating execution of a routine, a program that 
Pjl5 performs a specific job), LoadLibrary (loading and initiating 
Q a collection of routines) , CoCreatelnstance (creating an 

entity that can be individually selected and manipulated) , 
OpenFile (managing the read/write history of a file) , and 
ShortcutResolution (keeping shortcuts pointed to the correct 
20 resources) . 

The healing program 102 is configured by an administrator 
at an administrator terminal 108 and deployed to the user 
terminal 106 across a first communication link 110. The 
administrator terminal 108 and the user terminal 106 can be 
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'any device with processing, storage, and display capabilities 
such as a mobile computer, a stationary computer, or other 
similar device. The administrator is a human operator of the 
administrator terminal 108, although the actions of the 
5 administrator could be partially or completely electronically 
performed by, for example, a software program. Further, the 
administrator can configure the healing program 102 (and other 
components discussed below) from a location other than the 
administrator terminal 108, such as at the user terminal 106 

10 or at a core manager 122. The administrator configures the 
healing program 102 to determine what package should be used 
to heal the application 104 in case of failure. The healing 
program 102 is a software-based program, although the healing 
program 102 could include hardware or a combination of 

15 hardware and software. 

Because the user terminal 106 may include multiple 
applications, the administrator configures the healing program 
102 for all applications that may be included at the user 
terminal 106. Alternatively, the administrator can configure 

20 the healing program 102 for only a subset of those 
applications based on design considerations. 

In addition, the administrator creates configuration 
packages 130 that contain settings that control if and what 
user interface is displayed on the user terminal 106 when an 
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application failure occurs. The configuration packages 130 
are also deployed from the administrator terminal 108 to the 
user terminal 106 via the first communication link 110. 

The healing program 102 includes a process monitoring 
5 component (PMC) 112 that monitors the application 104 for 
failures in system calls, e.g., in calling a routine, in 
creating a process, in loading a library, in accessing a 
shortcut, or in making other similar calls pointing to a 
specific memory location. Failures in these system calls 
10 indicate that the application 104 is no longer properly 
\A installed. If the PMC 112 detects a failure in the 

LJ application 104, then the PMC 112 invokes a healing agent 114 

ffl included in the healing program 102 with information that the 

f healing agent 114 needs to identify the failure. 

iJ; 15 The healing agent 114 determines if the failure is 

^ healable by comparing the application 104 with lists 116 of 

^ healable applications configured at and sent from the 

administrator terminal 108 to the user terminal 106. The 
lists 116 include lists of packages used to heal applications. 
20 A package generally includes a collection of functions 

and/or data stored in binary format (or a combination of 
binary format and text format) and instructions that can be 
used to install and/or repair an application. One example of 
a package that can install and repair an application is a 
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20/20 package. A 20/20 package can be installed multiple 
times and supports delta installation (installation of only 
those parts missing from an application) . A unique 
identifier, e.g., a globally unique identifier (GUID) , 
5 identifies a 20/20 package. 

The lists 116 also include information corresponding to 
each of the packages such as: 

a) a user-friendly display name of the package, 

b) a unique identifier for the package, e.g., a 
nlO GUID, 

'--4 c) a location of the package, e.g., a uniform 

W resource locator (URL) or a uniform or universal 

ffl naming convention (UNC) identifier, 

d) the application (s) associated with the package, 

Li 15 and 

ly 

™ e) other information per design considerations. 

" The lists 116 are separate from the healing program 102, 

which makes it easier for the administrator to update or 
remove any particular entry in the lists 116, although the 
20 lists 116 could be included as part of the healing program 
102. The administrator, as discussed further below, can 
update files in the lists 116 and deploy a copy of the updated 
lists 116 to the user terminal 106, which replaces its copy of 
the lists 116 with the newly deployed copy. The administrator 
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may also be able to add or delete files in the lists 116 at 
the user terminal 106 while at the administrator terminal 108. 

If the application 104 is healable, i.e,, is included in 
the lists 116, the healing agent 114 determines which of the 
packages associated with the application 104 in the lists 116 
should be used to repair the application 104. The healing 
agent 114 then notifies a reinstalling agent 118, which 
repairs the application 104. 

The healing agent 114 may send events 120 regarding the 
failure to the core manager 122 across a second communication 
link 124. The core manager 122, e.g., a mobile computer, a 
stationary computer, a server, or other similar device records 
the events 120 in a collection of data 126, e.g., a database. 
In addition, the core manager 122 generates with an alerts 
component 128 any appropriate alerts regarding the events 120 
for communication to the user terminal 106 and/or the 
administrator terminal 108 via the first communication link 
110, the second communication link 124, or other network 
communication link. The communication links can include 
cables, optical fibers, point-to-point links, infrared links, 
cellular links, Bluetooth, satellite links, and other similar 
links . 

Referring to FIG. 2, an application healing process 200 
for the application 104 (see FIG. 1) is illustrated. The 



Attorney Dock^^l0559/316001/P9677 




application healing process 200 allows the application 104 to 
be repaired at the user terminal 106 even if the application 
104 was not originally installed with a package on the user 
terminal 106, e.g., the application 104 was installed with a 
5 package at the core manager 122 or other network source and 
the user terminal 106 obtained the application 104 from that 
network source. 

The administrator configures 202 the application healing 
settings, including the healing program 102, the lists 116, 
glO and the configuration packages 130. 

Sj Referring to FIG. 3, an application healing plug-in 

yj screen 300 on the administrator terminal 108 enables the 

W administrator to create, load, edit, and save the lists 116. 

f (If configuration is performed at another terminal, the 

yi 15 plug-in screen 300 appears on that terminal.) The plug-in 
screen 300 includes three panes: a lists pane 302a, an 
applications pane 302b, and an associated files pane 302c, 
each described further below. Which of the panes 302a-c the 
administrator can interact with depends on the currently 
20 selected item. If the administrator cannot interact with a 
pane 302, that pane 302 will be disabled. If the 
administrator can interact with a pane 302 but the pane 302 is 
empty, helper text is displayed in the pane 302. The helper 
text provides the administrator with basic hints as to what he 
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or she should do to populate the pane 302 with data. The 
administrator can ask for help with the plug-in screen 300 by 
clicking on a help button 332. Clicking on a column title 304 
alphabetically sorts the data below the title 304. 
5 The lists pane 302a displays application repair lists 

(ARL) 306 (corresponding to the lists 116) stored at the core 
manager 122. (The ARLs 306 are stored at the core manager 122 
but the administrator can access the ARLs 306 at whatever 
terminal the administrator uses to configure the lists 116.) 
□ 10 Each ARL 306 includes applications grouped together according 
SI to criteria determined by the administrator, e.g., contact 

yj management applications, corporate applications, development 

applications, etc. 
f The administrator can create a new ARL 306 by clicking on 

iT; 15 a new ARL button 308. When the administrator creates a new 
™ ARL 306, the administrator is prompted to enter a name for the 

new application repair list 306. Selecting an ARL 306 causes 
the ARL 306 to be loaded, meaning that its contents are 
displayed in the applications pane 302b and the associated 
20 files pane 302c. Once loaded, the administrator can modify 
the ARL 306, including deleting the ARL 306 by clicking on a 
delete ARL button 310. The administrator saves an ARL 306 by 
clicking on a save ARL button 312. The administrator is 
prompted to save changes made to an ARL 306 when the 
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administrator selects another ARL 306, schedules an ARL 
script, or closes the plug-in screen 300. The administrator 
can schedule ARLs 306 by clicking on a schedule ARL button 
316. This brings up a dialog box that allows the 
5 administrator to deploy or remove the ARL 306 to the user 
terminal 106 (and/or any other terminals that the 
administrator chooses or that are programmed to receive data 
and/or commands from the administrator) . The plug-in screen 
300 is not dynamically updated (although it could be 
plO dynamically updated), so if another administrator creates or 
SI modifies an ARL 306, the changes do not appear on the plug-in 

U screen 300 until the administrator clicks on a refresh ARL 

ffl button 314. 

: ; : 

The applications pane 302b displays applications 318 

nj 

^1 15 currently included in the currently selected (highlighted) 
P list 306 in the lists pane 302a. Two items are displayed for 

^ each application 318: a user-friendly application name (under 

the column title 304b) and a package location (under the 
column title 304c) . The administrator can add, edit, and 
20 delete applications 318 by clicking on a new application 
button 320, an edit application button 322, and a delete 
application button 324, respectively. Multiple applications 
318 can be associated with each ARL 306, but duplicate copies 
of the same application 318 cannot be added to the same ARL 
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306. Packages are considered duplicates if their 
identification, e.g., GUID, matches a package identification 
stored for a package already in the applications pane 302b. 
The applications pane 302b includes packages usable by the 
reinstalling agent 118. 

The associated files pane 302c contains files 326 
associated with the package location currently selected 
(highlighted) in the applications pane 302b. The healing 
agent 114 uses the files 326 to determine when an application 
318 should be repaired as described further below. The 
administrator can add and delete files 326 by clicking on an 
associate files button 328 and a delete files button 330, 
respectively. 

Referring back to FIG. 2, the healing program 102, the 
configuration packages 130, and the lists 116 are deployed 204' 
from the administrator terminal 108 to the user terminal 106 
across the communication link 110. If the healing program 
102, the configuration packages 130, and/or the lists 116 are 
configured at the user terminal 106, the user-configured 
elements need not be deployed to the user terminal 106. 
Further, the healing program 102 may be included in a 
collection of programs, in which case the healing program 102 
is deployed to the user terminal 106 as part of the collection 
of programs. 
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The lists 116 are stored at the user terminal 106 within 
the same directory as the healing program 102. Thus, in 
determining whether an application is healable, the healing 
program 102 can scan its own directory for application repair 
files, e.g., files having a particular extension such as the 
ARLs 306 (see FIG. 3), included in the lists 116. 

Deployed to the user terminal 106, the healing program 
102 begins running when the user terminal 106 boots up and 
continues running in the background as necessary to detect 
errors. The PMC 112, e.g., a DLL, monitors 206 the 
application 104 for errors while the application 104 is 
running. The PMC 112 monitors the application 104 for errors 
by monitoring system calls made by the application 104. When 
the application 104 makes a system call, the PMC 112 hooks the 
system call, meaning that the PMC 112 splices in a function to 
determine if an error occurred before the call is actually 
placed to the called function. 

The PMC 112 may not be able to determine if an error 
occurred without first closing an error dialog box. The error 
dialog box appears on the user terminal 106 when an error 
occurs and identifies the error that occurred. The error 
dialog box typically remains open until the user at the user 
terminal 106 closes the error dialog box. While the error 
dialog box is open, the PMC 112 cannot identify the error 
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code, as the called function is listed as pending. The PMC 
112 can send a message to close the error dialog box, without 
any user intervention, which removes the error code's pending 
status and enables the PMC 112 to identify the error code. 

For example, the PMC 112 monitors for LoadLibrary errors 
in a Windows environment by monitoring LoadLibrary system 
calls sent by the application 104. The system call includes 
error code information, among other LoadLibrary information, 
generated by the Windows system. If the PMC 112 determines in 
a Windows 9x environment that the error code value ranges from 
zero to thirty-one (inclusive) or in a Windows NT or 2000 
environment that the error code equals zero (null), then an 
error has occurred and the PMC 112 has detected a failure. 

In another example, the PMC 112 monitors for 
CreateProcess errors in a Windows environment by monitoring 
CreateProcess calls sent by the application 104. Like the 
LoadLibrary system call, the CreateProcess call includes error 
code information, typically a Boolean value. In a Windows 9x 
environment, if the PMC 112 determines that the error code is 
FALSE (or TRUE depending on system configuration), then an 
error occurred. If an error occurred, the PMC 112 determines 
if the error is reported in any open error dialog box, and if 
so, the PMC 112 closes the error dialog box. 
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In a Windows NT or Windows 2000 environment, however, the 
PMC 112 may not be able to tell if an error occurred by 
monitoring the Boolean value because the Boolean value TRUE 
(or FALSE depending on system configuration) may be used to 
5 indicate that the called function was created, not necessarily 
that the called system is functioning properly or that no 
error dialog boxes are open for that called function. Thus, 
the PMC 112 determines whether the Boolean value TRUE (or 
FALSE) indicates an actual error. 
jlO The PMC 112 waits briefly, e.g., one-quarter of a second, 

SJ before checking the called function' s status in case the event 

W that triggered the TRUE (or FALSE) Boolean value clears for 

H the called function. After waiting, the PMC 112 checks a code 

f indicating whether the called function is running or not, such 

1J;15 as an exit code. If the called function is not still running, 
S the PMC 112 enumerates all existing error dialog boxes, e.g., 

"~ by calling an EnumWindows function and gathering information 

about each of the error dialog boxes, such as the function 
associated with the error reported in each error dialog box. 
20 The PMC 112 searches the gathered information to find out if 
an error occurred in the called function. If an error has 
occurred, then the PMC 112 closes the appropriate error dialog 
box. 



- 14 - 



Attorney Doc^ 



10559/316001/P9677 



If the code indicates that the called function is 
pending, then the called function is still operating. The PMC 
112 tests an exit code for the called function to determine 
what the exit code means for that function, as it may indicate 
that an error occurred- How to test the exit code is 
determined experimentally. In a Windows NT environment, the 
PMC 112 tests a portion of the exit code that would correspond 
to a facility code if the exit code were a SCODE (a long 
integer value used to pass information about the called 
function to the application that called the function) . On a 
sixteen bit platform and a thirty-two bit platform, the PMC 
112 respectively tests bits nineteen to sixteen of the exit 
code and bits twenty-seven to sixteen of the exit code. If 
this portion of the exit code is negative, then an error 
occurred. If the portion of the exit code is zero (null) , an 
error still may have occurred, so the PMC 112 checks the exit 
code's DWORD. If the DWORD equals zero, one, or two, the PMC 
112 decides that an error likely occurred. 

When the PMC 112 detects 208 a failure in one of the 
system calls, the PMC 112 may display 210 a user interface to 
the user at the user terminal 106 that gives the user the 
ability to control the error's healing. Whether the healing 
program 102 displays the user interface and what elements are 
displayed on the user interface depends on various factors 
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such as the type of failure that occurred and/or how the 
healing program 102 and/or the user terminal 106 are 
configured by the administrator. 

For example, the healing program 102 may be configured to 
5 display a user interface when the PMC 112 detects an 

application failure if certain conditions are met. The 
conditions include but are not limited to whether the user 
interface is configured to run silently (e.g., without the 
knowledge of the user at the user terminal 106) , whether the 
p 10 application failure is a certain type of failure (e.g., is a 
sj CreateProcess failure) , and if the PMC 112 closed the error 

yj dialog box. If the conditions are met, then the healing 

n program 102 displays a user interface indicating that the 

= healing program 102 is attempting to repair the failed 

^ 15 application. If the healing agent 114 cannot locate a package 
^ for repairing the application as described below, and the 

conditions are met, the healing program 102 displays a user 
interface indicating that the healing program 102 is not 
configured to repair the failed application. 
20 The user interface includes an application repair wizard. 

The wizard has four pages: a welcome page, a package location 
page, a repair timing page, and a confirmation page. The 
welcome page is shown to a user at the user terminal 106 if 
either alternate locations of the application 104 within the 
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lists 116 or delayed repair of the application 104 are 
allowed. The welcome page introduces the user to the wizard 
and includes a timeout feature that automatically starts the 
application repair if no interaction with the user interface 
occurs within a certain time threshold, e.g., the user does 
not click on a help button or a next button displayed on the 
user interface within so many seconds of displaying the user 
interface. The package location page is shown if alternate 
locations of the application in the lists 116 are allowed. 
The package location page allows the user to select the 
location from which the package will be installed. The repair 
timing page is shown if delayed repairs are allowed. The 
repair timing page allows the user to delay the repair until 
the next user login at the user terminal 105. The 
confirmation page confirms that reinstallation of the failed 
application will take place. If the confirmation page is the 
only page shown to the user, the confirmation page includes a 
timeout feature as described above for the welcome page. 

Also when the PMC 112 detects 208 a failure, the PMC 112 
calls 212 (loads and initiates execution of) the healing agent 
114 with a command line including information about the 
failure, e.g., by making a CreateProcess call. The command 
line provides the healing agent 114 with information about the 
failure such as the type of failure (CreateProcess, 



Attorney Doc 



• 



10559/316001/P9677 



LoadLibrary, etc.), verification information, repairing 
information, application restart information, and other types 
of similar information per different design considerations. 

Referring to FIG. 4A, the healing agent 114 begins 402 a 
healing process 400 to attempt to repair the failed 
application 104. Because the healing agent's attempt to 
repair the application 104 might fail, the healing agent 114 
checks 404 to make sure that the failed application 104 was 
not just repaired. The healing agent 114 can determine 
whether the application 104 was just repaired based on whether 
the last attempt to repair the application 104 occurred within 
a predefined, prior time period, e.g., the last X minutes, the 
last Y seconds, etc. The administrator can configure the time 
period as part of the healing program 102. If an attempt to 
repair the application 104 was made within this time period, 
then the healing agent 114 sends 406 an appropriate event to 
the core manager 122 indicating that the repair failed. 

If an attempt to repair the application 104 was not made 
within this time period, then the healing agent 114 has 
determined that the application 104 needs repairing. The 
healing agent 114 attempts 408 to find a package that should 
be used for repairing the failed application 104. This 
attempt includes determining the GUID and the location of the 
package . 
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The healing agent 114 checks each of the entries in the 
lists 116 for the filename of the failed application 104. If 
the application filename is included in multiple list entries, 
then the healing agent 114 uses the first list entry including 
5 the application filename that it encounters. A preferred list 
entry among the multiple list entries including the 
application filename is not determined, although the list 
entries could be evaluated and prioritized by, for example, 
the package associated with the application filename. 

10 For some application errors, there may be multiple 

filenames associated with the application 104, e.g., an 
application filename and a library filename for LoadLibrary 
errors. The healing agent 114 uses the application filename 
in searching the lists 116. Once the application filename is 

15 found in the lists 116, the healing agent 114 searches the 
package associated with the application filename for other 
file(s) associated with the application 104. The healing 
agent 114 needs to find at least one other file in the 
package' s information for the package to be eligible for use 

20 in an attempt to repair the failed application 104. 

If the healing agent 114 does not locate the application 
filename in the lists 116, then no package exists (that the 
healing agent 114 knows about) that can repair the failed 
application 104. The healing agent 114 determines 410 if an 
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error dialog box displayed to the user at the user terminal 
106 indicating that the healing agent 114 is attempting to 
repair the application 104 is open or closed. If the error 
dialog box is open, then the healing process 400 is done 412. 
5 If the error dialog box is closed, then the healing agent 114 
sends 414 an appropriate event to the core manager 122 
indicating that the application 104 failed and that no repair 
package is available. 

If the healing agent 114 does locate the application 
^10 filename in the lists 116, the healing agent 114 identifies 
j the location of the package (or a copy of the package) 

I associated with the application filename. This location is 

I indicated in the lists 116 as described above. The user at 

the user terminal 106 can, however, select another package 
^15 location via the user interface as described above. 

Once the healing agent 114 finds a package (and its 
location) for repairing the failed application 104, the 
healing agent 114 determines 416 whether to repair the failed 
application 104 now or later. The healing agent 114 may be 
20 configured to automatically attempt to repair the application 
at the next user login at the user terminal 106. 
Alternatively, the healing agent may be configured to prompt 
the user at the user terminal 106 as to whether the 
application 104 should be repaired now or at all. The user 
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may also have the choice to delay the repair until a certain 
event occurs, such as at the next user login at the user 
terminal 106. 

However the healing agent 114 is configured, if the 
healing agent 114 determines that the application healing 
should not happen now, then the healing agent 114 determines 
418 if the repair is delayed. If the repair is not delayed, 
then a repair attempt will not be made at all, so the healing 
agent 114 sends 420 an appropriate event to the core manager 
122 indicating that the application 104 failed and its repair 
has been cancelled. If the repair is delayed, then a repair 
attempt may eventually be made, so the healing agent 114 sends 
422 an appropriate event to the core manager 122 indicating 
that the application 104 failed and its repair has been 
delayed. The healing agent 114 delays 424 repair of the 
failed application 104 until the appropriate time, e.g., when 
the next user login occurs. 

Referring to FIG. 4B, if the healing agent 114 determines 
that the application healing should occur now, then the 
healing agent 114 invokes 216 (see FIG. 2) the reinstalling 
agent 118 and performs a repair process 426. The healing 
agent 114 sends 428 an appropriate event to the core manager 
122 indicating that the application 104 failed and that the 
reinstalling agent 118 is repairing (or imminently will be 
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repairing) the application 104. The reinstalling agent 118 
attempts to reinstall the failed application 104 using the 
located program (or otherwise repair the application 104 per 
the located program's instructions). 
5 Once the reinstalling agent 118 completes the repairing, 

the healing agent 114 determines 432 the success of the repair 
(reinstallation) . If the reinstallation failed, then the 
healing agent 114 sends 434 an appropriate event to the core 
manager 122 indicating that the application reinstallation 
10 failed. 

If the reinstallation succeeded, then the healing agent 
114 determines 436 if the repaired application 104 should be 
restarted. The application 104 may need to be restarted, for 
example, if the repairs cannot take effect without a 

15 reboot/restart of the application 104 or the user terminal 
106, such as for CreateProcess . If a restart is not 
necessary, then the healing agent 114 sends 438 an appropriate 
event to the core manager 122 indicating that the application 
reinstallation succeeded. If a restart should occur, then the 

20 healing agent 114 restarts 440 the application 104 or the user 
terminal 106 as appropriate and sends 442 an appropriate event 
to the core manager 122 indicating that the application 
reinstallation succeeded. 
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During the healing process 400 and the repairing process 
426, the healing agent 114 may generate and send events to the 
core manager 122 as described above. Note that these and 
other events may be configured in the healing program 102 by 
5 the administrator not to occur. The events include 

information that may be needed to identify the failure that 
occurred and what action the healing agent 114 is taking to 
remedy the failure. The healing agent 114 sends the event 
information to the core manager 122 using a protocol such as 
plO queued Internet Protocol (QIP) . QIP enables the user terminal 
Sj 106 to communicate events to the core manager 122 even if the 

hi user terminal 106 is not connected to the core manager 122 via 

ro the second communication link 124 when an application failure 

^ occurs . 

pjl 15 The alerts component 128 at the core manager 122 receives 

the events, places/stores the events in the collection of data 
126, and generates any appropriate alerts. The alerts 
component 128 generates the alerts to appear as if the user 
terminal 106 generated the alert (so the administrator (s) who 
20 receive the alerts associates the failure with the appropriate 
user terminal 106) . 

When an event arrives at the core manager 122, the core 
manager 122 places the event in the collection of data 126. 
The collection of data 126 is organized as two database 
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tables, although the events can be organized using any 
combination of databases, tables, or other similar mechanisms. 
An events table records application healing events and 
includes some or all of the following fields for each recorded 
5 event: 

a) a unique identification name, code, number, 
symbol, etc. for the event in the events table, 

b) an identification name, code, number, symbol, 
etc. for the terminal on which the event 

10 occurred, 

c) an identification name, code, number, symbol, 
etc. for the package associated with the event, 

d) an identification name, code, number, symbol, 
etc. for the event that occurred, 

15 e) the date the event occurred, 

f) the time the event occurred, 

g) the location of the application associated with 
the event, 

h) the system error returned by the terminal that 
20 had the error, 

i) the error code for the reinstallation package, 
and 

j) other information per design considerations. 
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The collection of data 126 also includes a packages table 
that stores the packages that have been healed. The packages 
table includes some or all of the following fields: 

a) a unique identification name, code, number, 

5 symbol, etc. for the package in the packages 

table, 

b) an identification name, code, number, symbol, 
etc, for the package, 

c) the location of the package, and 

-_10 d) other information per design considerations. 

3 

Referring to FIG. 5, a clear events screen 500 enables an 
Qj administrator at the core manager 122 or other terminal to 

H remove stored events from the collection of data 126. The 

= administrator can select to delete all events or events older 

ryi5 than a certain date or time. The clear events screen 500 can 

nJ 

W be otherwise configured, e.g., to also enable the 

administrator to select certain events for deletion from a 
list of stored events. 

Other embodiments are within the scope of the following 
20 claims. 
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